NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Noscript | Noscript | * | 5.1.8.7 (excluding) |